$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa File: BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: oL0iAQiMNGGqy8SyfeQhPtHHx5iSDsrs6DFRwNNyfrg= Subject key identifier: 06:3B:B9:17:16:76:29:2B:0C:6E:F8:98:9E:B0:31:88:57:F2:F6:D8 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: A2 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:49:39 +0000 ROA not before: Sat 21 Dec 2024 05:49:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132879 IP address blocks: 202.29.22.0/24 maxlen: 24 2001:3c8:a702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:49:39 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676656f3-1e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:ef:08:01:5f:8e:de:89:ce:c8:60:31:57: 72:65:0a:59:0d:dd:67:77:0f:31:bf:c1:46:9a:4e: 85:8c:d2:be:f0:72:e5:d9:e2:e6:28:22:95:ce:ad: e7:64:1a:4e:32:d5:dd:48:5b:8c:ed:71:01:8f:34: 94:1c:62:1d:54:ce:2b:48:d6:a8:90:b3:3f:95:89: 8f:43:ca:0f:2a:57:1a:1c:2c:57:d0:3d:62:18:7c: 10:75:4f:8a:27:7e:67:a2:9c:51:bd:13:91:80:00: 03:f0:b5:97:ac:a9:7f:3d:60:0a:18:9b:f4:a6:08: a3:da:07:36:d5:eb:1d:e0:1b:d8:a5:e2:c1:2b:4b: a7:08:70:65:9b:01:65:08:4f:b6:ba:94:18:ce:39: 89:44:53:43:e0:56:7f:7a:ac:46:b3:bd:9c:c4:f0: 10:ba:66:24:5d:27:10:b7:fc:ac:1a:ad:c6:f2:aa: f8:bd:8e:56:37:e8:fb:4e:5b:07:27:a1:bf:ff:e4: 36:ae:9f:dd:90:fe:84:09:8e:6c:73:22:08:02:54: d9:e8:b1:b6:7f:b4:33:60:7b:96:e5:a7:1a:0d:ca: f0:79:86:4e:e6:aa:b4:9a:c6:76:53:21:94:43:0f: 5e:e7:a7:d2:d9:45:65:94:8c:a7:3e:a2:5d:4c:41: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:B9:17:16:76:29:2B:0C:6E:F8:98:9E:B0:31:88:57:F2:F6:D8 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.22.0/24 IPv6: 2001:3c8:a702::/48 Signature Algorithm: sha256WithRSAEncryption 30:c2:d1:7d:f9:62:56:a2:df:a5:7e:6c:26:fc:68:ee:2e:e8: b6:34:8e:a7:ee:04:5b:d6:72:bb:8b:af:fb:e9:9d:ce:e9:2c: 97:ab:51:2a:b2:65:b6:b3:9e:e7:6a:4b:a0:30:d0:d4:90:b0: 12:99:85:1f:f4:e9:9c:99:d3:dd:35:27:88:e7:31:cc:72:fb: 38:22:01:63:44:fd:89:06:12:9f:1e:89:2e:68:86:de:61:3f: c7:d3:91:b4:68:a9:cc:88:02:d0:7b:3e:ae:11:df:78:34:bb: 29:2f:87:fc:54:0e:31:ad:84:45:14:8a:84:44:c4:6d:ca:ab: 3f:af:40:09:66:44:ff:ef:56:ed:3f:86:d5:46:d2:60:d1:6b: 71:c8:53:ff:5b:2d:65:76:38:27:58:e3:7c:83:f6:9f:46:64: db:dd:82:4a:84:0b:52:0b:08:15:7a:41:bc:bf:1c:87:49:53: af:be:d4:eb:dc:5e:76:27:aa:90:66:8a:50:72:89:22:a2:a5: 6f:d8:70:a2:0a:05:58:bb:0d:e3:4c:24:6b:9f:f0:e6:cd:45: 47:61:36:d5:c6:62:e2:f5:64:e3:77:0a:8b:fb:a0:23:dd:80: 0e:b3:2d:6c:5a:30:6e:fd:00:ea:72:39:df:38:1c:76:e8:f2: 3d:36:38:64 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTZmMy0xZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdbvCAFfjt6JzshgMVdyZQpZDd1ndw8xv8FGmk6FjNK+8HLl2eLmKCKVzq3n ZBpOMtXdSFuM7XEBjzSUHGIdVM4rSNaokLM/lYmPQ8oPKlcaHCxX0D1iGHwQdU+K J35nopxRvRORgAAD8LWXrKl/PWAKGJv0pgij2gc21esd4BvYpeLBK0unCHBlmwFl CE+2upQYzjmJRFND4FZ/eqxGs72cxPAQumYkXScQt/ysGq3G8qr4vY5WN+j7TlsH J6G//+Q2rp/dkP6ECY5scyIIAlTZ6LG2f7QzYHuW5acaDcrweYZO5qq0msZ2UyGU Qw9e56fS2UVllIynPqJdTEE+EQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAY7uRcW dikrDG74mJ6wMYhX8vbYMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQkZDQTdFMUE3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKHRYwDwQCAAIwCQMHACABA8inAjANBgkqhkiG9w0BAQsF AAOCAQEAMMLRffliVqLfpX5sJvxo7i7otjSOp+4EW9Zyu4uv++mdzuksl6tRKrJl trOe52pLoDDQ1JCwEpmFH/TpnJnT3TUniOcxzHL7OCIBY0T9iQYSnx6JLmiG3mE/ x9ORtGipzIgC0Hs+rhHfeDS7KS+H/FQOMa2ERRSKhETEbcqrP69ACWZE/+9W7T+G 1UbSYNFrcchT/1stZXY4J1jjfIP2n0Zk292CSoQLUgsIFXpBvL8ch0lTr77U69xe dieqkGaKUHKJIqKlb9hwogoFWLsN40wka5/w5s1FR2E21cZi4vVk43cKi/ugI92A DrMtbFowbv0A6nI53zgcdujyPTY4ZA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:10:20 2025 by rpki-client